
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
File: lX5Qp1--UC844-2_P0qq5mWuFIs.mft (raw, json)
Hash identifier: mgGzAsMobnoKVFj/lJjG5W7xHtJYbVAIvpM/5Msv8no=
Subject key identifier: 05:AF:DD:2F:83:48:73:5A:AB:C8:6D:A7:9F:6C:9D:DB:BE:1F:DF:37
Authority key identifier: 95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B
Certificate issuer: /CN=A91D0B0E/serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B
Certificate serial: 010D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
Manifest number: 010B
Signing time: Sun 01 Mar 2026 07:03:16 +0000
Manifest this update: Sun 01 Mar 2026 07:03:16 +0000
Manifest next update: Sun 08 Mar 2026 07:03:16 +0000
Files and hashes: 1: lX5Qp1--UC844-2_P0qq5mWuFIs.crl (hash: 4MWq0OGdEcp50PhOrh0LaOPFjYof5iRv7NvsF0piar0=)
2: A0A9D60C807511EFAD8C4257C4F9AE02.roa (hash: ItObitSQLkGH+talVc8PNR7Z2o8Aby5tjfREkgGvzVc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl
rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 07:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 269 (0x10d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D0B0E, serialNumber=957E50A75FBE502F38E3EDBF3F4AAAE665AE148B
Validity
Not Before: Mar 1 07:03:16 2026 GMT
Not After : Mar 8 07:03:16 2026 GMT
Subject: CN=69a3e4b4-6787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:ff:63:aa:5c:97:ac:54:c3:a2:12:79:ef:
40:43:4e:c3:d0:20:13:bf:3a:2d:6a:5f:9c:fc:5d:
7f:f2:e9:5f:f9:72:6f:48:1b:60:48:7e:96:98:20:
8f:b1:01:32:ba:12:e7:47:b1:b7:a1:61:61:57:53:
66:1c:1b:a6:7e:25:4b:9e:32:b8:16:55:aa:b8:55:
b1:1b:d6:df:7a:c7:46:23:58:f3:e1:47:c1:0d:5c:
94:31:e3:14:49:2b:72:27:8d:d7:5b:9f:6d:92:78:
71:d8:15:18:b0:26:da:e6:93:e5:32:12:d6:17:54:
b2:3d:bc:9b:19:5c:6a:4f:b0:fa:d4:63:bd:c3:8a:
b1:c5:0b:02:a8:21:b8:94:92:de:d1:02:e7:6b:83:
cd:3f:2a:cd:0c:14:05:a2:9b:dd:11:99:00:6c:92:
0b:85:86:4d:fa:8a:38:42:90:13:ce:58:c5:92:e7:
e5:36:73:0a:10:66:c3:70:4b:0a:81:9b:c1:d8:61:
14:fa:dc:71:9d:f2:cb:43:cb:4e:93:d1:45:11:1f:
11:5e:24:29:f4:40:73:58:d3:80:b7:73:f4:63:27:
50:06:b8:4b:e4:fe:15:fe:a4:b4:8b:ae:ae:0f:8c:
23:7f:84:16:0c:63:dc:aa:32:f9:ab:c8:d8:fe:8c:
a7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AF:DD:2F:83:48:73:5A:AB:C8:6D:A7:9F:6C:9D:DB:BE:1F:DF:37
X509v3 Authority Key Identifier:
keyid:95:7E:50:A7:5F:BE:50:2F:38:E3:ED:BF:3F:4A:AA:E6:65:AE:14:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lX5Qp1--UC844-2_P0qq5mWuFIs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/4E6CB4F6806911EF887B703CC4F9AE02/lX5Qp1--UC844-2_P0qq5mWuFIs.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:f9:1e:3a:f1:00:c0:e8:0d:41:fb:8a:49:98:19:91:7a:ca:
97:23:fe:7e:6b:75:62:9e:00:28:04:b5:fd:dc:fa:bc:f8:7a:
2b:38:04:68:f7:50:3c:c1:58:aa:57:83:75:72:71:4e:56:9b:
85:2b:47:0c:5b:6b:4f:bc:30:32:0c:8e:90:ee:2f:24:7e:4f:
52:f8:ff:64:7d:77:bb:5c:b7:37:00:e2:5f:ec:d8:66:71:5b:
e5:74:b0:15:d2:ab:f5:30:59:d9:1f:50:dc:a2:38:24:f2:96:
94:d6:fd:02:f0:f5:82:f8:37:7b:08:18:41:b0:fb:0b:12:3d:
61:5f:3c:03:3f:98:0d:4b:8a:76:f7:c3:05:d5:27:f4:1a:4c:
bb:81:8d:a4:cf:70:93:5c:c4:af:f9:45:3f:94:d9:08:cd:9b:
71:23:02:da:47:67:59:b9:0e:2c:06:fd:b8:d8:8c:63:c4:dc:
d2:28:29:97:4d:ad:5a:11:eb:3f:e3:17:10:d8:3a:06:77:d5:
63:b2:47:8c:d8:0c:75:70:06:39:a7:54:68:1b:30:89:67:7a:
9b:c1:53:65:51:40:88:4c:81:c0:43:12:8a:8d:48:cc:65:0e:
9e:54:dd:23:36:9e:24:cc:78:50:4b:c0:69:00:b1:c2:2e:41:
e6:99:e4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:38:49 2026 by rpki-client